yup, the logged in user in this example is a superadmin, but to rule out issues I enabled access for authenticated users as well:
